Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
File:                     1nXJVO45yR5SX2izBxygV41qW64.mft (raw, json)
Hash identifier:          z2KwyP0iKFtAkYdg0QbzqU7UAcVFEvVeNmx/+7UYpEQ=
Subject key identifier:   7C:6F:9E:80:AE:58:63:F7:46:3A:52:B6:38:18:F3:93:79:C6:03:67
Authority key identifier: D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
Certificate issuer:       /CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Certificate serial:       01901DEC94D93B5473FC5C9112E688506F5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 22:02:42 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:42 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:42 +0000
Files and hashes:         1: 1nXJVO45yR5SX2izBxygV41qW64.crl (hash: fjLiBDfEcyOPaaHEppEkHX5xilOGTy/DyTHUUw+5VGs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:94:d9:3b:54:73:fc:5c:91:12:e6:88:50:6f:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
        Validity
            Not Before: Jun 15 22:02:42 2024 GMT
            Not After : Jun 16 22:02:42 2024 GMT
        Subject: CN=7c6f9e80ae5863f7463a52b63818f39379c60367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5c:c8:70:4e:5c:4c:82:0c:4d:5e:b7:27:29:
                    d3:12:1b:bc:14:be:ef:c9:ef:4a:a9:d4:ac:d0:77:
                    cc:28:0c:d1:de:7c:3b:ea:1c:03:f8:69:46:a5:ae:
                    2c:78:3b:d6:94:d4:8c:71:ef:94:99:a6:d4:1b:07:
                    29:66:7f:e3:45:b7:10:58:4d:95:0d:3f:9f:b4:27:
                    e5:5b:81:de:8a:3b:6c:ba:3d:6e:01:0c:c0:c5:f8:
                    ad:b2:fb:da:50:68:ad:0f:73:b2:94:72:a0:67:6a:
                    78:08:52:61:7a:c1:d0:c0:dd:0a:d1:ca:81:49:27:
                    98:59:2c:e2:15:5a:eb:4e:ef:1e:02:12:b4:cc:63:
                    19:38:72:fc:8b:85:60:6d:d2:8e:ea:2d:fe:f1:4b:
                    43:22:dc:9a:4d:d0:e8:a7:f9:52:59:d3:36:02:0e:
                    47:17:6a:8e:bb:bc:df:bf:a4:e3:a6:6a:96:60:23:
                    3f:4d:c0:f9:b8:43:c2:6e:67:fc:b4:84:ed:ae:5f:
                    4b:76:3a:3a:b9:0d:86:3f:70:6a:5a:21:db:8c:e3:
                    63:db:ed:d4:a7:be:d4:3e:c5:fd:25:5d:89:2b:26:
                    0a:45:6f:06:cf:5d:33:1b:b3:e4:95:d8:46:9b:b0:
                    b3:15:81:de:ef:0c:66:99:1c:39:76:f2:cf:df:ec:
                    00:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6F:9E:80:AE:58:63:F7:46:3A:52:B6:38:18:F3:93:79:C6:03:67
            X509v3 Authority Key Identifier:
                keyid:D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:91:87:75:55:a2:2a:59:6a:f2:ee:36:33:cd:15:90:3a:81:
         5a:63:a7:ca:7f:73:9b:84:2e:74:da:98:24:98:32:d4:ed:ed:
         b0:ae:57:34:a8:f1:0c:90:4e:ee:3f:49:72:ed:53:ab:ef:d2:
         13:bb:fa:d6:e0:e2:a7:20:6b:eb:23:3d:d6:b3:ad:a0:bf:20:
         77:34:4f:a6:ec:46:0f:ef:97:9c:0a:aa:7f:05:43:90:c1:75:
         e9:82:03:e7:94:d4:c1:9e:f7:34:d4:2c:99:0c:4b:4c:a0:fa:
         f5:08:25:6c:e1:0c:e8:55:66:7e:13:8f:8a:c1:f3:48:f0:4f:
         20:85:e4:34:95:12:35:75:c8:78:33:7a:84:62:19:7f:fc:a4:
         f1:f2:f0:ea:ed:94:bd:fc:72:e9:47:3d:30:ac:df:91:1b:15:
         58:32:0f:89:37:e3:fa:c1:dd:6c:0f:c7:1b:9b:80:d6:4b:ca:
         a8:6e:19:4a:59:04:0e:9c:78:cc:bb:d7:76:fb:cc:39:b2:7f:
         23:52:4c:df:9a:a5:66:19:ac:b8:04:1f:a1:45:00:c0:cc:f6:
         83:49:4a:c1:c3:86:28:29:1e:76:67:7d:33:f1:7d:3b:1a:57:
         3b:d4:58:81:13:66:e8:d9:36:29:84:ef:b6:74:a7:48:1c:92:
         ad:54:c8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:43:11 2024 by rpki-client on console-ams.rpki-client.org